Next-generation communication technologies such as fifth-generation (5G) wireless telecommunications systems enable the expansion of digital connectivity across commercial, industrial, and national infrastructure; as a result, an explosive increase in the use of the Internet of Things (IoT). In these highly distributed, autonomous environments, secure, scalable, and interoperable identity management systems are needed to provide authentication, authorization, and access control (AAA) for billions of devices and users. Centralized identity management frameworks have critical vulnerabilities due to their reliance on centralized architectures and traditional cryptographic algorithms. Vulnerabilities include susceptibility to quantum attacks, single points of failure, and cross-domain interoperability issues. Post-Quantum Cryptography (PQC) provides quantum-resilient security and Identity Mesh Architectures (IMAs) create decentralized and distributed identity management frameworks that support autonomous and cross-domain deployments. This paper presents a comprehensive analysis of PQC-IMAs through an examination of PQC, the IMA, security implications, deployment challenges, and future research directions. PQC-IMA integration allows for the creation of identity management systems that remain secure, resilient, and fault-tolerant when deployed in nationwide, large-scale 5G telecommunications networks and IoT systems. The solutions described in this paper can meet the challenges posed by the emerging Quantum Era and achieve operational efficiencies in connection ecosystems that are growing more and more complex and interconnected.
Next-generation communication technologies such as fifth-generation (5G) wireless telecommunications systems enable the expansion of digital connectivity across commercial, industrial, and national infrastructure; as a result, an explosive increase in the use of the Internet of Things (IoT). In these highly distributed, autonomous environments, secure, scalable, and interoperable identity management systems are needed to provide authentication, authorization, and access control (AAA) for billions of devices and users. Centralized identity management frameworks have critical vulnerabilities due to their reliance on centralized architectures and traditional cryptographic algorithms. Vulnerabilities include susceptibility to quantum attacks, single points of failure, and cross-domain interoperability issues. Post-Quantum Cryptography (PQC) provides quantum-resilient security and Identity Mesh Architectures (IMAs) create decentralized and distributed identity management frameworks that support autonomous and cross-domain deployments. This paper presents a comprehensive analysis of PQC-IMAs through an examination of PQC, the IMA, security implications, deployment challenges, and future research directions. PQC-IMA integration allows for the creation of identity management systems that remain secure, resilient, and fault-tolerant when deployed in nationwide, large-scale 5G telecommunications networks and IoT systems. The solutions described in this paper can meet the challenges posed by the emerging Quantum Era and achieve operational efficiencies in connection ecosystems that are growing more and more complex and interconnected.
The rapid convergence of sixth-generation (6G) networks and the Internet of Things (IoT) offers enormous potential for ultra-reliable, low-latency, and massive device connectivity. However, this integration also raises security and privacy concerns, particularly in light of new threats from quantum computing that could undermine traditional cryptography. The architecture of quantum-safe IoT networks that can withstand post-quantum security threats is thoroughly discussed in this review. It addresses the challenges related to how to use blockchain technology to provide decentralized trust as well as secure transactions, how to use post-quantum cryptographic algorithms to protect data confidentiality, and the best way to use a trust management architecture to improve identity verification, authorization, and authentication in the diverse IoT environment. The paper then examines scalability considerations, resource constraints, and interoperability problems that impact safe IoT deployments in the 6G era. This work serves as a roadmap for researchers and practitioners who aim to create robust and future IoT infrastructure and then maintain their security in a post-quantum world by integrating recent research patterns, solution development, and considerations related to real-world implementation.
The rapid growth of 5G wireless technology has transformed connectivity, offering exceptional bandwidth, ultralow latency, and massive IoT device connectivity.However, as quantum computers are progressing, resistance against attacks from such computers becomes a mandatory requirement for all critical infrastructure, necessitating efficient post-quantum cryptography (PQC) implementations for 5G-based IoT devices with limited resources.For instance, User Equipment (UE) reauthentication due to frequent handovers and mobility events is a daily operation that already comes with some overhead, which is not attractive to be used for IoT UE devices.Incorporating heavier PQ solutions into these re-authentications will lead to even more additional communication and computation overhead that may hinder PQ deployment in next generation networks.As such, this paper introduces a novel, lightweight approach for integrating PQC in 5G IoT authentication by proposing a custom identity-based session resumption mechanism without compromising interoperability with existing protocols.This approach prevents replay attacks and ensures perfect forward secrecy (PFS) by utilizing customized identities that are dynamically generated based on device-specific parameters, combined with intelligent server-side caching of quantum-resistant cryptographic materials that eliminate the need for full PQC computations during subsequent re-authentications.We demonstrate through realistic 5G experimentation that the proposed solution significantly lowers authentication overhead while providing quantumresistant security.
Quantum computing poses a significant threat to classical asymmetric cryptography, which is essential for ensuring confidentiality, authentication, and key exchange in contemporary digital infrastructures. Although post-quantum cryptography (PQC) provides mechanisms that resist quantum attacks, its implementation in Internet of Things (IoT) systems is challenged by constrained resources, including limitations in computation, memory, energy, latency, and bandwidth, and the heterogeneity of devices. This paper offers a comprehensive narrative review of PQC approaches applicable to IoT, systematically organizing 30 peer-reviewed studies published between 2022 and 2026 across four layers: device, communication, distributed trust, and application. Additionally, the review examines two cross-cutting dimensions, privacy and side-channel resistance. The analysis indicates a significant prevalence of lattice-based schemes, hybrid strategies, and integrations with blockchain technology, zero-knowledge proofs, federated learning, homomorphic encryption, AI, and Zero Trust architectures. Notably, key gaps remain in side-channel evaluation, migration pathways, deployment costs, and real-world validation—issues that are particularly critical given the long lifecycles of IoT devices and the ongoing threat of “harvest now, decrypt later” attacks.
The deployment of 5G and emerging 6G networks introduces significant security challenges for Internet of Things (IoT) ecosystems comprising billions of heterogeneous devices, including resource-constrained endpoints, more capable embedded controllers, gateways, edge nodes, and network infrastructure. At the same time, the long-term security of widely deployed public-key cryptography is challenged by advances in quantum computing, motivating migration toward standardized post-quantum key-establishment and digital-signature mechanisms. This comprehensive, evidence-based review classifies cryptographic mechanisms for wireless IoT in 5G and beyond across lightweight symmetric cryptography, post-quantum cryptography, privacy-preserving encryption, and adaptive security. The literature-reported implementation results are compared with explicit attention to heterogeneous hardware, memory, energy, communication, and latency constraints. Lightweight symmetric mechanisms remain relevant for constrained data protection, while standardized post-quantum mechanisms such as ML-KEM and ML-DSA address quantum-vulnerable public-key functions and generally introduce larger keys, ciphertexts, signatures, certificates, or protocol messages. This review therefore emphasizes interoperability, firmware upgradability, crypto-agility, and lifecycle management rather than physical device-size growth. A conceptual three-phase roadmap for 2025–2035 is presented in which quantum-vulnerable public-key mechanisms are progressively supplemented and, where appropriate, replaced by hybrid classical–post-quantum and then post-quantum-capable architectures, while standardized symmetric/lightweight protection remains in use where it satisfies application requirements. The roadmap dates are planning intervals rather than universal adoption forecasts.
Current cellular authentication mechanisms rely primarily on SIM-based Authentication and Key Agreement (AKA), which have scaled successfully worldwide but face challenges as the Internet of Things (IoT) grows to billions of devices. SIM provisioning and lifecycle management become increasingly costly, while reliance on long-term symmetric keys limits revocation flexibility and cross-operator support. To address these issues, we propose a SIM-less, certificate-based authentication framework that integrates Public Key Infrastructure (PKI) with post-quantum cryptography (PQC). Specifically, the framework employs Kyber for key encapsulation and Dilithium for digital signatures, providing quantum-resistant protection for future networks. A key challenge is the computational overhead of PQC on constrained IoT devices; we address this by offloading cryptographic operations to trusted edge servers, whose integrity is validated using attestation mechanisms such as Trusted Platform Modules (TPMs) or secure enclaves. We implement and evaluate the framework in a simulated FutureG environment, comparing IoT-only execution against edge-assisted configurations. Results show that edge offloading reduces TLS handshake latency by up to 96% while maintaining minimal resource usage on devices. These findings demonstrate that PQC-enabled PKI, combined with edge-assisted execution, offers a scalable and practical complement to SIM/AKA for secure and quantum-resilient authentication in FutureG IoT deployments.
The advent of quantum computing poses an existential threat to contemporary cryptographic standards, particularly those securing decentralized blockchain networks and cloud infrastructures.Classical public-key cryptosystems such as RSA, ECC, and DH, which rely on factorization and discrete logarithm problems, are rendered obsolete by Shor's algorithm, necessitating the transition toward post-quantum cryptographic (PQC) solutions.This study explores the integration of PQC algorithms, including lattice-based, hash-based, code-based, multivariate, and isogeny-based cryptographic mechanisms, within blockchain-ledger technologies and cloud architectures to ensure long-term security against quantum adversaries.A comparative analysis is conducted to evaluate computational efficiency, key size implications, communication overhead, and security resilience under quantum attack models.The research highlights the adaptation of PQC within blockchain consensus mechanisms, smart contract execution, and cryptographic primitives such as digital signatures, zero-knowledge proofs, and secure multi-party computation (MPC).Additionally, it examines the impact of PQC on cloud security, addressing challenges in quantum-safe key exchange protocols, homomorphic encryption for secure computations, and cross-platform interoperability within hybrid quantum-classical cloud ecosystems.Real-world implementations and benchmarking data provide insights into the feasibility of large-scale adoption, shedding light on standardization efforts by NIST and industry consortia.The study concludes with future directions, emphasizing the need for efficient PQC algorithm optimization, lightweight cryptographic frameworks for IoT-driven blockchain applications, and scalable post-quantum identity management systems.By establishing quantum-resistant security frameworks, this research underscores the imperative need for early adoption to mitigate cryptographic vulnerabilities in the impending post-quantum era.